Техническая информация
- <SYSTEM32>\dsound.dll файлом <SYSTEM32>\dsound.dll.mod
- <SYSTEM32>\mshtml.dll файлом <SYSTEM32>\mshtml.dll.mod
- %WINDIR%\hfWFnKH.exe
- <SYSTEM32>\cmd.exe /c """%TEMP%\delself.bat"" "
- dnf.exe
- <SYSTEM32>\mshtml.dll.mod
- <SYSTEM32>\wnoYw.vos
- %TEMP%\delself.bat
- <SYSTEM32>\dsound.dll.mod
- %WINDIR%\hfWFnKH.exe
- %TEMP%\ComA.tmp
- %TEMP%\wnoYw.vos
- %TEMP%\ComB.tmp
- <SYSTEM32>\dsound.dll в <SYSTEM32>\dsound.dllCRTSe
- <SYSTEM32>\mshtml.dll в <SYSTEM32>\mshtml.dllQPixf
- 'dn###.3322.org':88
- 'localhost':1037
- DNS ASK dn###.3322.org
- ClassName: 'TWINCONTROL' WindowName: '????????????'
- ClassName: '' WindowName: '12345'
- ClassName: '54321' WindowName: '12345'